This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft File: 5Lqtn19putkQB1-OHYBetB0N98s.mft (raw, json) Hash identifier: RWiy1JVSv2mqGQvUAwiqX3dHQJcCb2iPn28z8hCnGYU= Subject key identifier: 12:35:C7:09:31:5D:F4:D7:65:25:6D:D8:85:D2:A5:5D:A4:83:CC:5C Authority key identifier: E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB Certificate issuer: /CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb Certificate serial: 019B3F11203C14FD962AEFB923609972793B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft Manifest number: 1072 Signing time: Sun 21 Dec 2025 04:00:45 +0000 Manifest this update: Sun 21 Dec 2025 04:00:45 +0000 Manifest next update: Mon 22 Dec 2025 04:00:45 +0000 Files and hashes: 1: 5Lqtn19putkQB1-OHYBetB0N98s.crl (hash: +AHEGDrIJsu7+e7EMFy4ZV5fauKqROX0RFQv3isJSDI=) 2: Q49WFQb687C-dROudfCZNH5xgk0.roa (hash: 6gTPlVN38oZH6TKqFrihOGk/Y67bvVr39M4N4cXiKUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:20:3c:14:fd:96:2a:ef:b9:23:60:99:72:79:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb Validity Not Before: Dec 21 04:00:45 2025 GMT Not After : Dec 22 04:00:45 2025 GMT Subject: CN=1235c709315df4d765256dd885d2a55da483cc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:2e:2a:ed:c0:14:4c:32:2b:53:65:94:46: 20:ff:a3:e6:90:c7:fc:ea:0f:78:a0:66:41:55:ba: 9e:e5:ee:b1:47:ce:64:f3:03:08:38:b5:26:32:a6: c7:fd:4b:4f:5a:fa:01:53:af:24:60:e1:8c:fe:85: 71:e1:08:d1:a5:d2:14:d6:c9:d0:00:59:3f:2e:d1: e3:37:24:67:2b:94:84:eb:4b:81:66:7d:17:2f:dd: b8:ba:09:5b:3a:0a:c6:8c:0f:f0:a6:dc:b4:03:6d: 87:59:fd:8c:75:3b:84:7f:22:4b:db:73:84:ab:56: e5:a5:40:82:8d:30:c8:ed:e9:33:c0:6e:77:58:b0: f4:45:24:f8:7f:91:9e:48:23:e4:e8:39:9c:00:17: 12:f3:f6:5b:13:79:c4:a0:2d:1a:da:1f:9b:5c:2f: 1f:f2:2e:ee:72:56:71:db:a9:67:bd:58:f4:52:85: 22:53:e3:43:19:95:01:1e:e7:d9:a8:27:54:67:4e: 1d:72:71:ee:4d:9a:ed:58:c1:9f:44:a1:54:3e:76: 47:cc:dd:b3:2a:cc:c7:d7:2f:12:7a:45:2d:7f:a9: c7:25:76:ca:d0:04:98:8a:a9:2a:9f:a9:7a:41:ba: 82:e9:e8:d5:69:fe:75:da:61:66:b6:08:9e:54:16: 25:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:35:C7:09:31:5D:F4:D7:65:25:6D:D8:85:D2:A5:5D:A4:83:CC:5C X509v3 Authority Key Identifier: keyid:E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:3e:e1:3e:9f:d3:76:9d:9c:d2:c5:fd:42:a5:42:29:75:88: ff:aa:da:b3:9d:ba:f1:dd:cf:1b:83:f3:0e:fb:f9:61:98:b9: b3:ab:37:c9:24:dc:49:a5:a4:96:3e:b9:58:45:de:5d:1c:fe: 59:91:47:5b:9d:67:b9:b4:b6:47:fd:16:46:a6:0e:d3:0f:fd: a1:d3:93:ad:24:37:75:9f:c9:cd:a8:d4:af:d5:ef:0a:d5:94: 0e:00:1e:04:af:f4:08:f8:ea:33:14:18:7a:9f:b1:23:fa:d7: fb:7d:f3:ae:a5:47:af:b2:b1:bc:a5:a7:7f:b1:92:ad:3d:4f: 99:04:22:4a:97:48:19:d5:b9:32:ef:fa:ed:8c:19:03:33:05: e2:03:6b:5b:b3:71:08:c1:67:92:94:67:1f:1a:98:8c:7f:cf: 36:35:44:04:4c:4b:ed:4f:72:44:bb:f3:58:1b:37:9f:b0:dc: b1:f5:49:37:cf:1f:b4:8e:bf:a6:45:9d:cb:3b:6b:2b:c4:e6: 20:93:37:83:29:4a:02:78:92:88:b1:8a:d4:2b:c8:83:5f:4f: 60:37:b0:5a:73:ba:73:56:58:50:6c:f2:c6:a5:fb:26:2d:32: 06:5e:da:b3:fe:7b:28:a4:38:9b:4b:37:06:76:3b:89:2a:17: e0:69:f6:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ESA8FP2WKu+5I2CZcnk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmFhZDlmNWY2OWJhZDkxMDA3NWY4ZTFkODA1ZWI0MWQw ZGY3Y2IwHhcNMjUxMjIxMDQwMDQ1WhcNMjUxMjIyMDQwMDQ1WjAzMTEwLwYDVQQD EygxMjM1YzcwOTMxNWRmNGQ3NjUyNTZkZDg4NWQyYTU1ZGE0ODNjYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSIuKu3AFEwyK1NllEYg/6PmkMf8 6g94oGZBVbqe5e6xR85k8wMIOLUmMqbH/UtPWvoBU68kYOGM/oVx4QjRpdIU1snQ AFk/LtHjNyRnK5SE60uBZn0XL924uglbOgrGjA/wpty0A22HWf2MdTuEfyJL23OE q1blpUCCjTDI7ekzwG53WLD0RST4f5GeSCPk6DmcABcS8/ZbE3nEoC0a2h+bXC8f 8i7uclZx26lnvVj0UoUiU+NDGZUBHufZqCdUZ04dcnHuTZrtWMGfRKFUPnZHzN2z KszH1y8SekUtf6nHJXbK0ASYiqkqn6l6QbqC6ejVaf512mFmtgieVBYlvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBI1xwkxXfTXZSVt2IXSpV2kg8xcMB8GA1UdIwQY MBaAFOS6rZ9fabrZEAdfjh2AXrQdDffLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxxdG4xOXB1dGtRQjEtT0hZQmV0QjBOOThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lYmRjYTYtMjU4OC00MGEwLWExOWUt NmQwY2JkOGJkNDkyLzEvNUxxdG4xOXB1dGtRQjEtT0hZQmV0QjBOOThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9lYmRjYTYtMjU4OC00MGEwLWExOWUtNmQwY2JkOGJkNDky LzEvNUxxdG4xOXB1dGtRQjEtT0hZQmV0QjBOOThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiD7hPp/T dp2c0sX9QqVCKXWI/6ras5268d3PG4PzDvv5YZi5s6s3ySTcSaWklj65WEXeXRz+ WZFHW51nubS2R/0WRqYO0w/9odOTrSQ3dZ/JzajUr9XvCtWUDgAeBK/0CPjqMxQY ep+xI/rX+33zrqVHr7KxvKWnf7GSrT1PmQQiSpdIGdW5Mu/67YwZAzMF4gNrW7Nx CMFnkpRnHxqYjH/PNjVEBExL7U9yRLvzWBs3n7DcsfVJN88ftI6/pkWdyztrK8Tm IJM3gylKAniSiLGK1CvIg19PYDewWnO6c1ZYUGzyxqX7Ji0yBl7as/57KKQ4m0s3 BnY7iSoX4Gn22Q== -----END CERTIFICATE-----Generated at Sun Dec 21 06:20:58 2025 by rpki-client